[Samba] samba-tool domain backup online and Administrator password

[Rowland Penny]

On Fri, 13 Oct 2023 10:07:49 +1300
Andrew Bartlett via samba <samba at lists.samba.org> wrote:

> On Thu, 2023-10-12 at 21:01 +0000, bd730c5053df9efb via samba wrote:
> > Hi all!
> > I use bacula to perform automated backups of everything needed to
> > get my network up and running in case of disaster and when I backup
> > my DC's I execute a script which creates an offline backup of the DC
> > which I then backup to an external storage. I would like to be able
> > to create an online backup too but I don't like the idea of having
> > my domain administrator's password laying around in some script
> > file. Is there a way to perform an online backup in a passwordless
> > fashion?
> 
> An offline backup is all you need, the online option is for when it is
> useful to get this remotely, and runs via a different codepath (which
> sometimes matters) but otherwise these are equivalent.
> Andrew,
> 

It is very easy to carry out an online backup of the AD domain (you do
not backup a DC) and you should use kerberos instead of a password. I
backup the domain from a Unix domain member using a user that is only
used for that task.

Rowland